Kernel Mode Vulnerability in NVIDIA Quadro, NVS, and GeForce Products
CVE-2016-7391
Key Information:
- Vendor
Nvidia
- Vendor
- CVE Published:
- 8 November 2016
Badges
What is CVE-2016-7391?
The NVIDIA Windows GPU Display Driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer (nvlddmkm.sys) due to a missing array bounds check in the handler for DxgDdiEscape ID 0x100010b. This flaw could permit an attacker to write to kernel memory, potentially allowing for denial of service or escalation of privileges in the affected versions of the driver.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Quadro, NVS, and GeForce (all ) Quadro, NVS, and GeForce (all versions)
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Timeline
- ๐ก
Public PoC available
- ๐พ
Exploit known to exist
Vulnerability published
Vulnerability Reserved